Latest coverage for Gift Card

A gift card is a prepaid stored-value instrument issued by a retailer, financial institution, or payment network. It can be physical or digital and is redeemed using a card number, barcode, or personal identification number (PIN). In information security, the relevant asset is the card’s remaining value and the systems that activate, check, transfer, and redeem it.

Common abuse includes social-engineering scams that persuade victims to disclose card numbers and PINs, tampering with cards or barcodes before sale, and automated theft through poorly protected balance or redemption interfaces. Compromised retailer accounts or administrative systems can also enable unauthorized activation, balance changes, or redemptions. Useful controls include keeping redemption secrets out of messages and images, rate-limiting and monitoring balance checks, protecting payment and gift-card APIs, reconciling activation and redemption records, and placing suspicious transactions on hold for investigation. Incidents may require tracing transactions, disabling exposed cards, and preserving relevant account and redemption logs.